4608 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
m0duspwnens	46cbcfa330	Merge branch 'dev' of https://github.com/Security-Onion-Solutions/securityonion-saltstack into issue/1066	2020-09-14 08:45:54 -04:00
Mike Reeves	841db1b4b9	Merge pull request #1336 from Security-Onion-Solutions/experimental ... Get Rules onto the install for airgap	2020-09-13 14:58:36 -04:00
Mike Reeves	112a0b426e	Merge branch 'dev' into experimental	2020-09-13 14:54:00 -04:00
Doug Burks	18dc7a915a	Hunt: Fix Tunnel query #1335	2020-09-13 08:26:33 -04:00
Jason Ertel	89c38541ee	Force all SOC quick actions to open in new tab	2020-09-13 02:52:25 -04:00
Mike Reeves	d6d22fb0e0	Fix Strelka	2020-09-12 23:07:35 -04:00
Mike Reeves	bb936c5bee	Fix Strelka	2020-09-12 23:07:15 -04:00
Mike Reeves	259df2ed6b	Fix Strelka	2020-09-12 23:06:06 -04:00
Doug Burks	311d67b934	Hunt: fix RFB groupby #1332	2020-09-12 06:14:58 -04:00
Josh Patterson	f03b128924	Merge pull request #1331 from Security-Onion-Solutions/fix/top ... add redis to eval if playbook enabled	2020-09-11 18:31:19 -04:00
m0duspwnens	5f567368be	add redis to eval if playbook enabled	2020-09-11 18:30:21 -04:00
m0duspwnens	77911acfb4	so-status module	2020-09-11 18:28:53 -04:00
Mike Reeves	48d1d0c168	Strelkas Rules Update	2020-09-11 18:24:56 -04:00
Josh Patterson	2d508d9e57	Merge pull request #1328 from Security-Onion-Solutions/issue/1281 ... Issue/1281	2020-09-11 15:02:30 -04:00
m0duspwnens	15563f2ee6	add nginx to top for sensor	2020-09-11 12:28:42 -04:00
m0duspwnens	bb0e686444	add elasticsearch to top for nodes missing it	2020-09-11 11:35:17 -04:00
Mike Reeves	46866f40b3	Merge pull request #1325 from Security-Onion-Solutions/experimental ... Update Script	2020-09-11 11:02:57 -04:00
Mike Reeves	6e0cdf7be4	Update Script help	2020-09-11 11:01:56 -04:00
m0duspwnens	5f7c270984	only allow strelka to run on nodes that are sensors	2020-09-11 10:22:12 -04:00
Mike Reeves	af9a19b6e8	Merge pull request #1321 from Security-Onion-Solutions/experimental ... IDS Tools now with Airgap support	2020-09-10 19:05:16 -04:00
Mike Reeves	53319738c4	Fix Nginx state	2020-09-10 16:56:48 -04:00
Mike Reeves	ef46094b0c	Update all nginx configs	2020-09-10 13:55:56 -04:00
Josh Patterson	53ff87b0ee	Merge pull request #1312 from Security-Onion-Solutions/issue/1281 ... add elasticsearch state to top for manager node	2020-09-10 12:47:05 -04:00
m0duspwnens	bc420d4a02	add	2020-09-10 11:57:15 -04:00
Josh Patterson	ca26548b2c	Merge pull request #1310 from Security-Onion-Solutions/issue/1281 ... Issue/1281	2020-09-10 10:08:25 -04:00
m0duspwnens	0ed9c65646	remove logic from fleet state to only run if in top	2020-09-10 10:07:05 -04:00
Doug Burks	8c280221da	Hunt: Fix Intel groupby #1131	2020-09-10 07:00:54 -04:00
Doug Burks	24c325e9a1	Fix Elasticsearch parsing for Zeek Intel Indicator #1309	2020-09-10 06:41:19 -04:00
Josh Brower	56587f0df5	Merge pull request #1308 from Security-Onion-Solutions/feature/wel-ingest ... Add event.category to WEL	2020-09-10 06:16:56 -04:00
Josh Brower	c3b2d98ffb	Add event.category to WEL	2020-09-10 06:15:30 -04:00
Doug Burks	7161a662aa	improve Wazuh support in Hunt	2020-09-10 06:03:33 -04:00
Mike Reeves	5d4e8925a3	Add Firewall Logic	2020-09-09 21:16:40 -04:00
Mike Reeves	45b11b2321	Fix Rulecat	2020-09-09 18:38:07 -04:00
Doug Burks	d18c498574	Update so-features-enable	2020-09-09 17:32:42 -04:00
m0duspwnens	09cc8ae1fb	fail the state if it isnt in top	2020-09-09 16:48:50 -04:00
m0duspwnens	01c9f7b2ae	merge with dev and resolve conflicts	2020-09-09 16:23:36 -04:00
Mike Reeves	7ebf93fcb5	IDSTools Overhaul	2020-09-09 15:53:32 -04:00
Josh Patterson	1e32b32659	Merge pull request #1302 from Security-Onion-Solutions/fix/sostatus ... Fix/sostatus	2020-09-09 15:07:12 -04:00
m0duspwnens	39f200f565	fix whitespace	2020-09-09 14:59:21 -04:00
Mike Reeves	a77532c1d8	Merge branch 'dev' of https://github.com/Security-Onion-Solutions/securityonion into dev	2020-09-09 14:57:17 -04:00
Mike Reeves	04f4539385	Fix Airgap Repo Name	2020-09-09 14:57:10 -04:00
m0duspwnens	b0c526364f	handle strelka	2020-09-09 14:55:54 -04:00
m0duspwnens	921262b9a5	prevent duplicate containers for so-stauts	2020-09-09 14:07:38 -04:00
Jason Ertel	a5b87850df	Remove user sync between SOC and Cortex due to the unnecesary complexities involved with this style of integration	2020-09-09 14:07:36 -04:00
m0duspwnens	05d736d2df	handle strelka	2020-09-09 14:00:58 -04:00
m0duspwnens	918d9cf00f	handle strelka	2020-09-09 13:57:53 -04:00
m0duspwnens	3433b90029	fix so-status for strelka and wazuh	2020-09-09 13:53:10 -04:00
Doug Burks	82b582540e	Add period	2020-09-09 12:56:19 -04:00
Doug Burks	90ba1be978	Improve formatting of NIDS selection screen	2020-09-09 12:55:14 -04:00
m0duspwnens	e84507c386	Merge remote-tracking branch 'remotes/origin/dev' into fix/sostatus	2020-09-09 12:51:01 -04:00